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IN THE CLAIMS : 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1 . (Original) A method of detecting location for a personal firewall of a client 
computer, said method comprising 

determining the current location of said personal firewall based on an Internet 
Protocol (IP) address currently used by said client computer, and 

verifying the current location determined on the basis of the current IP address of said 
client computer by carrying out a location verification procedure with a predetermined 
network element. 

2. (Original) A method according to claim 1, wherein said step of determining 
comprises 

storing in said personal firewall a list of IP addresses of a home network, 

comparing the current IP address of said client computer with said list of IP addresses, 

and 

if the current IP address of said client computer matches one of said addresses on said 
list, determining said personal firewall to be located in said home network. 

3. (Original) A method according to claim 1, wherein said step of determining 
comprises 

storing in said client computer an IP address space of a home network, 

comparing the current IP address of said client computer with said IP address space, 

and 

if the current IP address of said client computer matches said IP address space, 
determining said personal firewall to be located in said home network. 

4. (Currently Amended) A method according to claim 1, 2 or 3, wherein said 
step of verifying comprises 
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checking availability of said predetermined network element related to the current IP 
address, said predetermined network element responding only if said personal firewall is 
located in the network in which it is assumed to be on the basis of the current IP address, 

verifying the current location determined based on said current IP address if said 
predetermined network element r e spons e s responds with a specific identity data. 

5. (Original) A method according to claim 4, wherein said specific identity data 
is a Media Access Control (MAC) address of said predetermined network element. 

6. (Original) A method according to claim 4, wherein said predetermined 
network element is a firewall in said home network. 

7. (Original) A method according to claim 1, comprising 

using said determined and verified location for selecting security rules for controlling 
said personal firewall in a location-dependent way. 

8. (Original) A method according to claim 1, comprising 

using said determined and verified location for enabling a periodical security rule 
update enquiry from said personal firewall to the central management, when said personal 
firewall is in said home network, and for disabling said periodical enquiry, when said 
personal firewall is outside said home network. 

9. (Original) A method according to claim 1, comprising using said determined 
and verified location for 

sending log files to a centralized log server from said personal firewall when the 
current location of said client computer is in said home network, said log files containing 
information on communication transactions in said client computer, 

collecting log files locally at said personal firewall when the current location of said 
client computer is not in said home network, 

transferring said locally collected log files from said personal firewall to said 
centralized log server when said client computer is connected to said home network. 

10. (Original) A computer terminal, comprising 
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a personal firewall having a mechanism monitoring the current location of said 
personal firewall based on a Internet Protocol (IP) address currently used by said computer 
terminal, and 

said personal firewall having a mechanism verifying the current location determined 
on the basis of the current IP address of said client computer by carrying out a location 
verification procedure with a predetermined network element. 

1 1 . (Original) A computer-readable medium, containing a computer software 
which, when executed in a computer device, causes the computer device to provide a 
personal firewall routine comprising 

determining the current location of said personal firewall based on an Internet 
Protocol (IP) address currently used by said client computer, and 

verifying the current location determined on the basis of the current IP address of said 
client computer by carrying out a location verification procedure with a predetermined 
network element. 
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